Lucene search

K
cve[email protected]CVE-2011-3489
HistorySep 16, 2011 - 2:28 p.m.

CVE-2011-3489

2011-09-1614:28:12
CWE-119
web.nvd.nist.gov
26
cve-2011-3489
rnautility.dll
rsvchost.exe
rockwell rslogix
denial of service
remote attackers
tcp port 4446
overflow
out-of-bounds read
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) “a memset zero overflow” or (2) an out-of-bounds read, related to improper handling of a 32-bit size field.

Affected configurations

NVD
Node
rockwellautomationrslogixRange19

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%